Privacy Policy

1. Data controller

The controller of your data is Teou Mobility LLC, a company governed by United States law, formed in the State of Wyoming, whose registered office is located at 30 N Gould St, STE R, Sheridan, WY 82801, United States.

For any question about your data: privacy@teou-app.com

This policy covers the Téou application (Android and web) and the teou-app.com website. The same text, word for word, is published in the application and on the website.

In the event of any discrepancy between the language versions, the French version prevails. For users residing in The Gambia, the English version prevails. Where the law of the user’s country of residence requires another language, the version drafted in that language prevails.

Status of the processing. Téou is currently the subject of a restricted technical pilot, conducted for functional and security validation purposes. The service is not marketed and is not open for subscription in any of the countries concerned until the declaration or authorisation formalities required by the competent national data protection authority have been completed there. The formalities required by the national data protection authorities, and the authorities themselves, are described in section 10.

2. Data collected

• Your phone number, the only account identifier. No sign-up by email or password is required.
• The name you enter, to identify you to your contacts. Your name and your connection status are accessible to a signed-in user who enters your exact number to send you a request; there is neither a search by name nor a list of users.
• A one-time verification code, stored only as a cryptographic hash, never in plain text, together with the IP address from which it was requested, kept with it to limit abuse.
• Your GPS position, only during an active sharing session. See section 3.
• A notification token provided by Google, once this feature is activated, used to alert you when a contact asks for your position.
• The contact details of the persons you wish to meet or deliver to. See section 5.
• In Delivery Mode, a savings counter (number of rounds, kilometres avoided, minutes saved), without any location coordinates, and the settings you enter to estimate it (fuel price, consumption, city speed).

The application includes no audience measurement tool, no advertising and no crash reporting. No profiling is carried out and no automated decision is taken about you.

3. Location during the journey

Téou collects location data to enable your contacts to follow your journeys and deliveries Live, including when the screen is off, when you are using another app or when you have closed Téou, until the end of the journey. Live sharing only begins after your explicit action (“START THE JOURNEY”), once the request has been accepted by your contact. Throughout the journey, a notification remains displayed, even if you close the app. Guidance and live sharing stop as soon as the journey ends or is cancelled, when you tap “Quit navigation”, in the notification or in the app, when you sign out, or at your request; live sharing with the screen off, from another app or after Téou is closed stops no later than 4 hours after the journey starts. You can withdraw this permission at any time in your phone’s settings. During guidance, the guidance card is displayed by default on your phone’s lock screen, showing your contact’s name but never their number; you can turn this off in the app settings.

No history of your movements is built. Your position is recorded by overwriting the previous one, never added to a log: the application cannot reconstruct where you have been.

4. Use of data

Positions are used only to show the journey in progress to the persons you have chosen to inform, to calculate the route and the estimated time of arrival and, in Delivery Mode, to order the round and to show each customer their rank, the number of stops before them and the courier’s path towards them when they are the next stop. These calculations are made on the sender’s phone and on the publisher’s routing server; no navigation data is transmitted to a third-party service. Positions are not used for advertising purposes.

5. Data about third parties

When you send a request, in Loved-ones Mode as in Delivery Mode, you enter only the name and the phone number of the person concerned (the data subject). No postal address is requested or recorded. That is precisely the purpose of Téou: the meeting point is not an address entered in advance, but the position that this person indicates themselves, once they have accepted the request in the application.

Our lawful basis for processing this data. These persons are not necessarily Téou users. We process their name and number on the basis of our legitimate interests in passing on to them the request of the person who wishes to meet them or deliver to them — interests they share, since they alone decide whether to respond. This processing is limited to what is strictly necessary: two pieces of data, a single purpose, a short duration.

What the person concerned receives. If they have a Téou account, they see the request when they open the application — the name and number of the person who wishes to meet them or deliver to them — and accept or decline it. If they do not have an account, Téou sends them nothing: it is up to you to pass the invitation on to them. They are never located without their agreement: it is for them to choose whether or not to indicate their position.

What you commit to. By entering another person’s number, you undertake to do so only for a real meeting or delivery that concerns them. Using Téou to contact people for direct marketing, canvassing or unsolicited approaches is forbidden and leads to the account being closed.

Erasure. If the person does not accept the request, their name and number are deleted no later than 24 hours after it was sent. If they accept it, they are deleted with the journey within the periods set out in section 8. They may at any time object to this processing or request immediate erasure by writing to privacy@teou-app.com.

6. Recipients and processors

Teou Mobility LLC does not sell any personal data and does not share any for advertising purposes. Your data is visible to the persons with whom you choose to share your position, for the duration of the sharing. In Delivery Mode, the courier’s position is visible to all the customers of the round who have accepted, throughout the round; each customer otherwise receives only what concerns them (section 4).

The only other recipients are the essential technical providers:

• Supabase Pte. Ltd. — database, authentication, server functions and real-time broadcast channels. A company governed by Singapore law, but your data is hosted in the European Union, on its infrastructure in the Paris region (France). Position messages broadcast in real time are not stored.
• Vercel Inc. — hosting and delivery of the web application and of the teou-app.com website. A company governed by United States law; files are served by a worldwide network. Vercel receives no data from the application, but may keep technical logs (IP address, date, page requested) for the security and proper operation of the service, for a limited period.
• The map and routing server (maps.teou-app.com) is operated by the publisher and hosted by OVHcloud (OVH SAS, France) in its London data centre (United Kingdom). It receives the start and end coordinates of each route calculation, which are not kept.
• During the pilot, no provider carries sign-in codes. When code sending is activated, codes will be carried by Meta (WhatsApp Business Cloud API) or, as a fallback, by an SMS provider, named here before activation; these providers will then receive your phone number and the code.
• Google (Firebase Cloud Messaging) — notifications, when this feature is activated: receives your device token, the name of the person contacting you and the technical identifiers of the journey.

As the base map and route calculation are hosted by the publisher itself, no navigation data is transmitted to a third-party mapping service, and no traffic information service is used.

7. Transfers outside your country

Your database is hosted in the European Union, in Paris, whatever your country of residence. The company that operates it, Supabase Pte. Ltd., is governed by Singapore law: administrative access from outside the European Union, in particular from Singapore or the United States, therefore remains possible. Other ancillary functions run outside the Union: the delivery of the application and website files by Vercel Inc., a company governed by United States law, and, once they are activated, the sending of the sign-in code and notifications (section 6). Where European data protection law applies to these transfers outside the Union and a data processing agreement is in force between the publisher and the provider concerned, those transfers are governed by the European Commission’s standard contractual clauses in the cases and under the conditions provided for in that agreement; you may obtain a copy of these clauses by writing to privacy@teou-app.com. In all other cases, these transfers are subject to each provider’s contractual terms and to the law of your country of residence (section 10). Your positions are stored in the European Union (Paris region). The start and end coordinates of a route calculation are processed on the publisher’s map server, in the United Kingdom, a country recognised by the European Commission as ensuring an adequate level of protection (Commission Implementing Decision (EU) 2021/1772, as amended by Commission Implementing Decision (EU) 2025/2574 of 19 December 2025). For residents of countries outside the Union, transfers outside the national territory are subject to the formalities described in section 10.

8. Retention periods

In short: if you do not accept a request, your contact details disappear within 24 hours; a completed journey disappears within 3 days.

• Completed journey, with its positions and the contact details of the persons concerned: deleted within 72 hours (3 days). Automatic purging runs every hour.
• Journey left active without an update for 24 hours: automatically closed, then subject to the period above.
• Request not accepted: the person’s name and number are deleted within 24 hours.
• Sign-in code and associated IP address: deleted as soon as the code is used, and no later than two hours after it expires.
• Connection status (“online”): removed automatically between 1 hour and 2 hours after the last signal sent by the application.
• Profile (number, name, settings), notification token and savings counter: kept as long as the account exists, and deleted immediately at your request.
• Hosting providers’ technical logs (IP address, date, resource requested): kept for at most 24 hours by Supabase and at most 1 hour by Vercel. The map server does not write any request log.

During the pilot, no separate backup copy of the database is made.

9. Your rights

You have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to object and the right to data portability, as well as the right to withdraw your consent to geolocation at any time from your phone’s settings.

Deleting your account is immediate and available from “My account”. It triggers the cascading erasure of your profile, your journeys, the associated recipient contact details, your savings counter, your sign-in codes and your authentication account. This action is irreversible.

You may also lodge a complaint with the data protection authority of your country. These authorities, and the law from which each derives its competence, are listed in section 10.

10. Competent supervisory authority

Each of the countries covered by the deployment of Téou has its own personal data protection legislation and its own supervisory authority. Teou Mobility LLC recognises the competence of the national authority of the country of residence of the data subject, as well as the application of local law to the processing of their data, and undertakes to respond to any request from that authority or from the data subject.

The declaration or authorisation formalities required by these authorities, in particular for geolocation processing and for transfers outside the national territory, are in progress. The references of the receipts and authorisations issued are published in the legal notice as soon as they are notified.

• Benin — Autorité de protection des données à caractère personnel (APDP), Law No. 2017-20 on the Digital Code
• Burkina Faso — Commission de l’informatique et des libertés (CIL), Law No. 001-2021/AN
• Côte d’Ivoire — Autorité de régulation des télécommunications/TIC de Côte d’Ivoire (ARTCI), Law No. 2013-450 of 19 June 2013
• France — Commission nationale de l’informatique et des libertés (CNIL), Regulation (EU) 2016/679 (GDPR) and Law No. 78-17 of 6 January 1978, as amended
• The Gambia — Information Commission, Personal Data Protection and Privacy Act, 2025
• Guinea — Autorité de protection des données à caractère personnel (APDP), Law L/2016/037/AN
• Mali — Autorité de protection des données à caractère personnel (APDP), Law No. 2013-015 of 21 May 2013, amended by Law No. 2017-070
• Mauritania — Autorité de protection des données à caractère personnel (APD), Law No. 2017-020 of 22 July 2017
• Niger — Haute Autorité de protection des données à caractère personnel (HAPDP), Law No. 2022-59 of 16 December 2022, as amended
• Senegal — Commission de protection des données personnelles (CDP), Law No. 2008-12 of 25 January 2008
• Togo — Instance de protection des données à caractère personnel (IPDCP), Law No. 2019-014 of 29 October 2019

A person residing in a country that is not listed above may refer the matter to the competent authority of their place of residence. In all cases, a complaint may be sent to us directly at privacy@teou-app.com, without prejudice to the right to refer the matter to the authority.

11. Minimum age

Téou is not intended for children under 16, and we do not knowingly collect their data. If you find that a child has sent us data, write to us at privacy@teou-app.com so that we can delete it.

12. teou-app.com website

The website sets no cookies, includes no audience measurement or advertising tool, and loads no third-party tracking script. Your theme preference (day or night) is stored only in your browser and is never sent to us.

The hosting provider Vercel Inc. may keep technical logs (IP address, date, page requested) for the security and proper operation of the service, for a limited period.

13. Contact

For any question about your data: privacy@teou-app.com

Teou Mobility LLC — 30 N Gould St, STE R, Sheridan, WY 82801, United States.